Towfik Islam

I am Towfik Islam From Bangladesh. I am Security Specialist with 3 year+ experience in various domain such as Web Application Testing, Vulnerability Assessment and Penetration Testing(VAPT) ,API Pentesting and Writing manually report or generating report using tools . I am also a continuous learner and it's my passion.

Skills & Experience :

Operating Systems: Microsoft Windows, Kali Linux, Different Linux distros

Technical Skills: web Penetration Testing, Vulnerability Assessment, Network Pentesting, SIEM - SOC Lavel 1 Source Code Analysis, Leadership.

Log Analytics and Threat hunting in Web Applications and services.

Log Analytics and Threat hunting in DNS (Domain Name Server).

Tools Experience (Offensive): Burp Suite, Metasploit Pro, Nmap, Wpscan, SQL Map , FFUF , Nuclei , Hydra , Zap, Dirsearch etc.

Tools Experience (Defensive): Splunk , Wireshark, Nessus, OpenVAS, Acunetix etc.

Programing Skills : HTML , Python , Bash Script,Golang,Basic C programming.

Position held: Cyber Security Specialist (Internship)

Company Name: Chaitanya Cyber Strix Technologies

Duration: September 2023 to December 2023

Location: Dhaka, Bangladesh

Summary: During my internship at Chaitanya Cyber Strix Technologies, I specialized in Vulnerability Assessment and Penetration Testing, honing my skills in identifying and addressing security vulnerabilities. Additionally, my role involved active participation in Cyber Defense strategies and comprehensive report writing. This experience provided me with practical insights into real-world cybersecurity challenges.

Position held: Cyber Security Specialist (Internship)

Company Name: Deshlink Limited

Duration: July 2023 - October 2023 (Present)

Location: Dhaka, Bangladesh

Summary: Continuing my journey as a Cyber Security Specialist at Deshlink Limited, I am actively engaged in Vulnerability Assessment and Penetration Testing projects, contributing to the organization's cybersecurity posture. My responsibilities include executing cyber defense strategies and crafting detailed reports to ensure a robust security framework.

Achievements:

• Participated in the 78th OFPPT-CTF in Morocco, representing Team Paradoxical Hackers Squad from Dhaka, Bangladesh. The national CTF competition witnessed the involvement of over 585 professional teams and 1800+ players.

Trainer Experience:

Duration: April 2020 to Present

Location: Remote

Summary:

I have been actively involved in training and mentoring, conducting Ethical Hacking and Bug Bounty courses for more than 400 students. This online training experience has allowed me to share my knowledge and expertise in the cybersecurity domain.

Bug Hunter

Platform: BugCrowd

Duration: January 2021 - Present

Location: Remote

Summary:

As a Bug Hunter on BugCrowd, I have successfully identified vulnerabilities in web and mobile applications, reporting issues ranging from critical to low-level. This role showcases my commitment to proactively contribute to improving the security posture of digital platforms.

Bachelor of Science (B.Sc) in Computer Science 

I am doing B.Sc at • Uttara University

Diploma in Engineering Certificate (Textile)

Darpon Polytechnic Institute, Kushtia • 2021 • 3.46

Secondary School Certificate (SSC)

Dariapur High School, Dariapur, Meherpur • 2017 • 4.46

PROFESSIONAL CREDENTIALS

Ethical Hacking Essentials (EHE) - EC -Council • 2023

Practical Ethical Hacking (PEH) - TCM Security • 2023

Vulnerability Management - Blue Team • 2023

Jr Penetration Tester - Tryhackme 2023

Certified SOC Analyst v1 - Tryhackme • 2023

Certified SOC Analyst v2 -Tryhackme • 2023

Network Analysis - Blue Team • 2023 

Threat Hunting - Blue Team • 2023

Short Course (CISSP) - IT Masters • 2023  

Short Course (CISM) - IT Masters • 2023

OSINT - Blue Team • 2023

Digital Forensics - Blue Team • 2023

Course Completion Certificate(ISC)² - ISC ² • 2023